GOMAX ULTIMATE 5.40.0 plugs directly into WordPress's own Export and Erase Personal Data tools and adds automatic data-retention purges, so when someone asks "what do you hold on me?" or "delete my data," the answer covers your leads, messages and form entries too — and old personal data is cleaned up on a schedule, all on your own site. Two of the trickiest parts of GDPR — data-subject requests and data minimization — become built-in, not a scramble across half a dozen plugins.
Most WordPress owners can technically run a data export or erasure from Tools → Export/Erase Personal Data. The problem is coverage: core only knows about the data it stores. Your CRM leads, contact-form entries and sent messages are invisible to it unless each plugin registers with the privacy API. GOMAX now does exactly that — and goes further with retention.
Key takeaways
- Native DSAR coverage. GOMAX registers with WordPress's built-in personal-data exporter and eraser, so requests you run from Tools → Export/Erase Personal Data automatically include GOMAX leads, messages and form entries.
-
One erasure engine. The same logic powers the WordPress tools and the GOMAX
export_personal_data/erase_personal_dataactions — consistent results whichever way a request comes in. - WooCommerce orders are protected. Orders are preserved for legal retention and reported, never silently deleted.
- Automatic data-retention purges. Set how many days to keep leads, messages and form entries; a daily job deletes anything older. Zero days means keep forever.
- Preview before you purge. A dry-run shows exactly what would be removed before anything is deleted — and it all stays on your server.
Why this matters for compliance
GDPR gives people the right to access their data and the right to be forgotten, and it expects organizations to practise data minimization — not keeping personal data longer than necessary. Those are two different obligations, and WordPress out of the box only partly helps with the first and not at all with the second.
By registering with the WordPress privacy API, GOMAX makes the official workflow complete: an admin fulfilling a request through Tools → Erase Personal Data now erases the requester's GOMAX records in the same pass, and an export request returns them grouped and labelled. There's nothing extra to remember and no separate export to stitch together by hand.
Data-subject requests, done right
Run a request the way you already do — from WordPress Tools, or via GOMAX's own actions if you're driving it through an AI assistant. Either way:
- Access / portability: everything GOMAX holds for the email is returned — leads and their activity, messages sent to them, and any native form entries that contain the address.
- Erasure: those first-party records are deleted, and the response tells you plainly what was removed and what was retained (WooCommerce orders, for legal reasons).
- Safety first: the GOMAX erase action is dry-run by default, so you always see the plan before committing.
Data retention: keep only what you need
The new retention engine is where minimization becomes automatic. Choose a window per data type — for example keep leads 365 days, messages 180 days, form entries 90 days — and enable it. From then on a daily job removes anything past its window, and every purge is logged. Prefer to keep something indefinitely? Set its window to zero.
Before enabling, run the purge as a dry-run to see counts for exactly what would be deleted. Nothing leaves your site at any point; the purge runs against your own database on your own schedule.
Frequently asked questions
Does this work with the normal WordPress privacy tools?
Yes — that's the whole point. GOMAX registers with WordPress's native personal-data exporter and eraser, so requests you run from Tools → Export/Erase Personal Data automatically include GOMAX leads, messages and form entries alongside core data.
Will erasing a person's data delete their WooCommerce orders?
No. Orders are preserved for legal retention and reported in the result, never deleted. GOMAX only removes its own first-party records (leads, messages, form entries).
What does data retention actually delete?
Whatever you configure: leads (and their activity), sent messages, and native form entries older than the day-count you set for each. Zero days means that store is kept forever. A daily job runs the purge when retention is enabled.
Can I see what will be removed before it happens?
Yes. Both erasure and the retention purge support a dry-run that returns exact counts, so you can review before anything is deleted.
Where does any of this data go?
Nowhere but your own site. GOMAX ULTIMATE is self-hosted and privacy-first — exports, erasures and purges all run on your WordPress install, and nothing is ever sent to GOMAX or a vendor cloud.
